$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa File: cd939959-f7a9-375a-86a0-c699a51f7975.roa (raw, json) Hash identifier: EZQdSbw8jKEFjBOW0dxakn8CSL+48MxHr897L8aZ05g= Subject key identifier: 69:A3:7A:D6:02:D8:39:D3:D2:96:9B:16:02:13:8B:B5:6E:2A:2A:22 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F43285849513026ADF9FF266728948F80 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa Signing time: Wed 26 Mar 2025 14:51:19 +0000 ROA not before: Wed 26 Mar 2025 14:51:19 +0000 ROA not after: Tue 24 Jun 2025 14:51:19 +0000 asID: 21947 IP address blocks: 199.195.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:51:30:26:ad:f9:ff:26:67:28:94:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Mar 26 14:51:19 2025 GMT Not After : Jun 24 14:51:19 2025 GMT Subject: CN=f8155a16-2080-418f-9f8e-2d2959511b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e4:f9:52:e5:ed:d3:12:c9:dc:60:bf:41:f1: 6c:f5:f7:c8:c5:d3:b5:1d:a8:6b:e7:57:7e:0b:6b: 3c:16:7f:c5:15:d6:4e:4b:6e:8f:b9:98:ac:f6:5c: f2:f1:04:49:e1:c1:cc:43:34:ef:3d:1a:bf:6a:10: 5b:0d:27:3e:6e:80:80:1e:d0:1e:38:39:b4:91:95: 5e:74:98:c9:70:80:f5:f1:2d:df:91:19:07:88:db: c7:05:9e:73:b5:34:8b:60:f7:c0:3a:c2:7f:6b:8c: 4f:3f:9f:2d:24:59:36:14:8e:e2:d8:ee:b6:37:ce: 40:35:0a:21:8e:57:b3:ff:ad:6b:c3:c5:23:07:fa: 45:e8:10:e0:b6:7c:c6:31:ee:ac:f9:d4:ef:8d:73: 6f:a0:e0:ca:1d:5e:29:95:e1:a8:d9:66:cc:cc:f6: 3d:11:e0:8d:b5:32:c2:af:77:a9:82:47:61:02:a7: e5:a8:b9:f7:2a:6a:94:a6:4f:4a:dc:d9:c3:3d:1b: 45:b1:d7:4a:be:88:08:94:d4:d8:c3:4a:d0:54:d5: 97:1d:4e:1a:42:fe:e2:53:23:f7:80:e2:99:ed:28: 32:16:d3:43:31:64:77:25:8c:9f:a1:b6:84:bb:2d: fa:fb:75:13:06:56:c9:22:6f:0e:9a:5b:1a:da:56: fc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A3:7A:D6:02:D8:39:D3:D2:96:9B:16:02:13:8B:B5:6E:2A:2A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 199.195.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ff:98:1e:1a:55:b8:10:71:64:99:c2:f6:57:6e:c3:0f:a9: 91:f8:0e:93:54:e1:2f:21:1e:48:4d:e5:a9:74:41:8c:91:74: af:0e:59:1d:66:ed:4d:3f:bb:eb:a1:10:e2:47:17:d1:b8:f4: ad:fb:1e:40:aa:84:2c:3e:54:e6:d0:16:c3:bc:66:3a:f9:1b: e8:00:e6:41:1b:93:52:2d:2c:90:9b:b7:e4:3f:bf:ee:0e:c0: 76:da:49:67:06:15:5e:e1:43:aa:b9:58:0c:9b:27:d8:dc:5e: d4:a9:fc:d5:34:5d:b5:d6:65:ce:89:c7:5c:fb:77:4e:ee:1d: 24:42:23:03:34:5d:5c:a1:8c:20:17:a6:d0:15:04:66:1d:ca: 5b:eb:90:64:22:9b:6a:14:b7:8c:10:1b:f4:4b:50:b7:21:9b: e8:92:0f:5b:8f:a0:66:5c:a2:6d:94:11:56:0d:8e:15:8e:0c: 0d:02:75:30:1b:95:48:84:d3:66:58:2f:ba:49:ef:87:d8:44: 7c:9c:c7:4c:47:54:d0:6a:54:0d:90:00:93:81:3e:86:3f:5c: 47:b5:88:69:17:bd:6c:1c:ce:b7:a3:e9:30:e1:7f:c7:07:f8: 5a:e6:c9:f3:ef:14:e8:69:03:7f:b4:d7:78:64:3e:59:0f:1a: d6:ff:f1:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElRMCat+f8mZyiUj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDMyNjE0NTExOVoXDTI1MDYyNDE0NTExOVowLzEtMCsGA1UEAxMk ZjgxNTVhMTYtMjA4MC00MThmLTlmOGUtMmQyOTU5NTExYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+T5UuXt0xLJ3GC/QfFs9ffIxdO1Hahr51d+ C2s8Fn/FFdZOS26PuZis9lzy8QRJ4cHMQzTvPRq/ahBbDSc+boCAHtAeODm0kZVe dJjJcID18S3fkRkHiNvHBZ5ztTSLYPfAOsJ/a4xPP58tJFk2FI7i2O62N85ANQoh jlez/61rw8UjB/pF6BDgtnzGMe6s+dTvjXNvoODKHV4pleGo2WbMzPY9EeCNtTLC r3epgkdhAqflqLn3KmqUpk9K3NnDPRtFsddKvogIlNTYw0rQVNWXHU4aQv7iUyP3 gOKZ7SgyFtNDMWR3JYyfobaEuy36+3UTBlbJIm8Omlsa2lb8iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmjetYC2DnT0pabFgITi7VuKioiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvY2Q5Mzk5NTktZjdhOS0z NzVhLTg2YTAtYzY5OWE1MWY3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABP/mB4aVbgQcWSZwvZXbsMPqZH4DpNU4S8hHkhN5al0QYyRdK8OWR1m 7U0/u+uhEOJHF9G49K37HkCqhCw+VObQFsO8Zjr5G+gA5kEbk1ItLJCbt+Q/v+4O wHbaSWcGFV7hQ6q5WAybJ9jcXtSp/NU0XbXWZc6Jx1z7d07uHSRCIwM0XVyhjCAX ptAVBGYdylvrkGQim2oUt4wQG/RLULchm+iSD1uPoGZcom2UEVYNjhWODA0CdTAb lUiE02ZYL7pJ74fYRHycx0xHVNBqVA2QAJOBPoY/XEe1iGkXvWwczrej6TDhf8cH +FrmyfPvFOhpA3+013hkPlkPGtb/8Qk= -----END CERTIFICATE-----Generated at Sun May 11 04:20:35 2025 by rpki-client